2020-08-19 12:29:49 +02:00
|
|
|
---
|
2023-10-25 22:26:17 +02:00
|
|
|
### PROXMOX
|
|
|
|
|
# fileserver3 ist ein LXC-Container; der Container ist "privileged" damit der Bind-Mount die richtigen Rechte bekommt
|
2022-11-25 16:38:17 +01:00
|
|
|
|
2023-10-25 22:26:17 +02:00
|
|
|
### oefenweb.ufw
|
|
|
|
|
ufw_rules:
|
|
|
|
|
- rule: allow
|
|
|
|
|
to_port: 22
|
|
|
|
|
protocol: tcp
|
|
|
|
|
comment: 'ssh'
|
|
|
|
|
from_ip: 0.0.0.0/0
|
2024-02-15 13:52:00 +01:00
|
|
|
- rule: allow
|
|
|
|
|
to_port: 4949
|
|
|
|
|
protocol: tcp
|
|
|
|
|
comment: 'munin'
|
|
|
|
|
from_ip: 192.168.2.0/24
|
2023-10-25 22:26:17 +02:00
|
|
|
- rule: allow
|
|
|
|
|
to_port: 445
|
|
|
|
|
comment: 'smb'
|
|
|
|
|
from_ip: 0.0.0.0/0
|
|
|
|
|
- rule: allow
|
|
|
|
|
to_port: 139
|
|
|
|
|
comment: 'smb'
|
|
|
|
|
from_ip: 0.0.0.0/0
|
2022-10-15 16:09:45 +02:00
|
|
|
|
2023-11-29 21:15:50 +01:00
|
|
|
### mgrote_fileserver_smb
|
2023-11-09 16:57:43 +01:00
|
|
|
smb_workgroup: WORKGROUP
|
|
|
|
|
smb_min_protocol: "SMB2"
|
|
|
|
|
smb_client_min_protocol: "SMB2"
|
|
|
|
|
smb_client_max_protocol: "SMB3_11"
|
2024-02-01 22:20:44 +01:00
|
|
|
smb_enable_snapshots_dir: true
|
|
|
|
|
smb_enable_snapshots_shadow: true
|
2024-02-15 13:52:00 +01:00
|
|
|
|
|
|
|
|
### mgrote_munin_node
|
|
|
|
|
munin_node_plugins:
|
|
|
|
|
- name: chrony
|
2024-04-04 09:48:09 +02:00
|
|
|
src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/chrony/chrony
|
2024-02-15 13:52:00 +01:00
|
|
|
- name: systemd_status
|
2024-04-04 09:48:09 +02:00
|
|
|
src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/systemd/systemd_status
|
2024-02-15 13:52:00 +01:00
|
|
|
- name: systemd_mem
|
2024-04-04 09:48:09 +02:00
|
|
|
src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/systemd/systemd_mem
|
2024-02-15 13:52:00 +01:00
|
|
|
config: |
|
|
|
|
|
[systemd_mem]
|
|
|
|
|
env.all_services true
|
|
|
|
|
- name: fail2ban
|
|
|
|
|
src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/fail2ban
|
|
|
|
|
config: |
|
|
|
|
|
[fail2ban]
|
|
|
|
|
env.client /usr/bin/fail2ban-client
|
|
|
|
|
env.config_dir /etc/fail2ban
|
|
|
|
|
user root
|
|
|
|
|
- name: samba
|
|
|
|
|
src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/samba
|
|
|
|
|
config: |
|
|
|
|
|
[samba]
|
|
|
|
|
user root
|
|
|
|
|
group root
|
|
|
|
|
env.smbstatus /usr/bin/smbstatus
|
|
|
|
|
env.ignoreipcshare 1
|
2024-05-25 22:03:37 +02:00
|
|
|
|
|
|
|
|
### mgrote_apt_manage_packages
|
|
|
|
|
apt_packages_absent:
|
|
|
|
|
- nano
|
|
|
|
|
- snapd
|
|
|
|
|
- ubuntu-advantage-tools
|
|
|
|
|
- fwupd # weil LXC
|
